Fresh repo - removed all old commits

2025-06-21 21:36:29 +01:00
commit 6fa64414f8
99 changed files with 35021 additions and 0 deletions
@@ -0,0 +1,149 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+    # < name of the deploymentand reference
+    name: nextcloud
+    # < namespace where to place the deployment and pods
+    namespace: home-stuff
+    labels:
+        # < label for tagging and reference
+        app: nextcloud
+spec:
+    #ENC[AES256_GCM,data:v/YHg53HMxTa97ev2Jul9sNvW78fEq+x2PyE,iv:CbCjarScaV2cUaUwJCJDn5lIHEPL54lZ1hufWkrtR98=,tag:7IZMTMB2MbQeIHrvP9YYOQ==,type:comment]
+    replicas: ENC[AES256_GCM,data:tg==,iv:fO9g4vYjq3cbC92tH3METFNjrCqxRpNqd1lCx1OWqnY=,tag:dRoaQ29G+1BpkkjsmOoOBQ==,type:int]
+    selector:
+        matchLabels:
+            app: ENC[AES256_GCM,data:jG3R09vPcpdG,iv:TQodU41icom9u+3o8U4D9nOcygQZBmlmkwxwtxpJJTI=,tag:hlkGc4Nq5Jsst88zi2hW7A==,type:str]
+    strategy:
+        rollingUpdate:
+            #ENC[AES256_GCM,data:cLF5l8V8dzsQhr+9U+ggGxBUJ9ZcETBF9PzFcmgtZBcvn6yV2ctH5QdkxwqCj6macVij8oagw7XTpAp+O/oekEhwD7vaZaRVBMM/G3VvYm043FhVCdsx6D1uIA==,iv:vSVt5SOOljwljsPNVcWU0jkpQqEBvlVEDZ//amkRJVE=,tag:z7vJ912g46ubcekJg7BwHQ==,type:comment]
+            maxSurge: ENC[AES256_GCM,data:Lg==,iv:LLjAYe1H+YdDXZ87gT5vUHqwlAWeNkJrp8B75FYxBqs=,tag:KfMRJncXsta1zNY2nPJ6jw==,type:int]
+            #ENC[AES256_GCM,data:rsSqGbt/8OEWny8Yf6cXBkZKytePpiZ3I5NslLgZQLKASHkqxm2Y5Vd9x9ExhPb8qEt7sHMqXzplneaewkcrCkXlhL9zahA=,iv:0gj0JGSxdk9HCrZTRe5eBGGEJOgOLKzPn9FUccEukVg=,tag:FqC4RWGoQrF7jDvb+ONyoQ==,type:comment]
+            maxUnavailable: ENC[AES256_GCM,data:mA==,iv:hwgXn0SFY5slm+0t71H793YbTWWP2V3REzHnMSlY/fE=,tag:XTurOjpPccevvKwKRehSyA==,type:int]
+        #ENC[AES256_GCM,data:/6YUNBlyiXQl/HLIKbWgAKdfvWZEC0m6RVbqzcX9yrIMhXxNa/C9Kp+o8uJVu82QVFVSluB6WJjddRimIiKrDRFn5hjLng==,iv:1fz6yysj0Oxa4cLPUM0BCo0A+2nr0V/1KbgIaMhLEzA=,tag:hnG9UmkEAO+cS8ee0hIVzg==,type:comment]
+        type: RollingUpdate
+    template:
+        metadata:
+            labels:
+                app: nextcloud
+        spec:
+            volumes:
+                - ENC[AES256_GCM,data:L38NVavkVBOlfoMTJBvFETjSvsY5nVK4iXhUNkHGd7Z9lKy3RQ==,iv:fSSOkfM9CcQSq9NcTQea8nZ+s09iQk4VrRZ2+MHNWyo=,tag:mXfQsBrkryuGurJznilhzQ==,type:comment]
+                - name: ENC[AES256_GCM,data:k4Wa3ZRe4R8aB91xAAA=,iv:Xg6akhmVwlFuFi3PcPPd6ATGVYVDLJoCbinUwF92c/E=,tag:zX9Y/CvmS6t/RU5pfdgRYg==,type:str]
+                  persistentVolumeClaim:
+                    #ENC[AES256_GCM,data:gSKpIh++lMpSmQ6reFMdy+fhKw0ZS9Q0RPw1/DXpaJevi5PSNhCdOv1Tvg==,iv:6XMVT8SN+YhRa18X/PPypiIeGGuVEmT+BM9hEHUJDjw=,tag:sOSENHXX7JLMsL1GaxCXfQ==,type:comment]
+                    claimName: ENC[AES256_GCM,data:stx6mU63RDk3++ftJcXgFjr5,iv:9oY0fVAUgxevkYB7na/U4xYwH9MFUlOZfYnrj4pAG4o=,tag:H8Acg53VuL5foMqZGjvTkA==,type:str]
+                - name: ENC[AES256_GCM,data:beuhcxG/NRDBMBvq+A==,iv:5bLX/fNSeXdqsV0ECyY+ot7csfcTct9HacuRsTxofIQ=,tag:0Vx9VIlmOQAAB6o56Q6j7A==,type:str]
+                  secret:
+                    #ENC[AES256_GCM,data:fPi4PGY/pHXSkAA2N6tzmKWntlSo59t3rDeddD2RpVdpHxvkhcD0Xco=,iv:mVZW8F9Mt/KcWSQRlhT92Vk8/18sWr4WHCiG9z47G4s=,tag:y+tNf2E+WV16jF5S+xC7bg==,type:comment]
+                    secretName: ENC[AES256_GCM,data:gQsAQPo+9a40+ElamcjJiiAH,iv:Jltk/jTBUkhBhcQWXtR4ny5+T151gcuvRcAE/FQ3dwM=,tag:Twny0oCjlpK9azAyOYseWQ==,type:str]
+            containers:
+                - ENC[AES256_GCM,data:McG60m6cer5jnVlpFCidAzWIhQ13wIiLaxMjLat/BsayE8VF4i8rk7uJEg==,iv:WP78GXUYyoNSJClQKfkzU40vLO0q329cuzHh2QEa4IU=,tag:NYTUvcdfEN8s3qvrBdm14A==,type:comment]
+                - image: ENC[AES256_GCM,data:UP8nOoplYWdFBFYB/uc/MsU0RiiPB55veVEU5hb696KWOxf59eYM0SAj,iv:DHotGNb4SO+rMT1mEOtODU7DbaWReY5NHunq4kpqJVM=,tag:9m6tWjjiLgAz2D7fb+YOmQ==,type:str]
+                  #ENC[AES256_GCM,data:CwbOkx7sLD16rd1gBtBIN7AqtEc=,iv:ADbexcU/+jQJeeQbPyB1j5XIe9ZaVqXWWfJEXkTfQdQ=,tag:HtiKYAKrGTL7zbNY+byJfA==,type:comment]
+                  name: ENC[AES256_GCM,data:QvZ0abVoPNdh,iv:DBdOC2h4jlmKZWKDf7aAVg50I1JsYUAqM3jX6IsswLI=,tag:4Wj4P5wIMbSNN8I7NRj7fA==,type:str]
+                  #ENC[AES256_GCM,data:99ZT6KGxYy3H3TjbvK2axkmWj8ksjxlYZxF7jvz+62aqlybLSGq77W5JgqOW8REC+Tc05A+6N14Yig==,iv:BCPG6qVba2cmpA0WP2uv69/g0IK0Hdu4TMvP1fhlAHk=,tag:vshcu20l6DwtqbDfyKpDkg==,type:comment]
+                  imagePullPolicy: ENC[AES256_GCM,data:KBJGxe4sCSPyrJDb,iv:TMRqZ4KHrqhdoRlFTOu6wEhUssIT1NQO9xJtU0ijCmo=,tag:TTc1mRo9tIhsOHgkeh6lsw==,type:str]
+                  #ENC[AES256_GCM,data:ZpIlkGk+qfPKfeXSR6Ws8+fmrL0N+dPAuIe4Xdizhag0rQj3JaLX/LvX0R2T5eS4LNArUgj0X8q1KFxktqdRXM7EFSS5ziFr+ffPEg==,iv:EoRF0Nb+kUTpiK1nLxHNP8FWfZ0FV9dDVFNWmcDlPnE=,tag:jXedY1Kp0aDRhxmt2dy4rA==,type:comment]
+                  env:
+                    - name: ENC[AES256_GCM,data:Mz22yA==,iv:3NKzxYM46gegXPjS865vl+hyrqwI44jdpCbxc055I3A=,tag:k5qPOVl9KSak4YpAv/12PA==,type:str]
+                      #ENC[AES256_GCM,data:5t9Vt7v/9GdzV2ssUx7w,iv:onSqNOk1toIClTlXOCRA7disuhkzIEg7h8U01V1XSgI=,tag:deHVSpQofQiUHdrLuJAvgw==,type:comment]
+                      value: ENC[AES256_GCM,data:KHokMw==,iv:jpKUU2VLoYGoVG/2rd8mHHGuf3MB8LHNp7wEFXs5V2o=,tag:84FX9lIuQLVBamK3ejfOuQ==,type:str]
+                    - name: ENC[AES256_GCM,data:vIJBkw==,iv:r/kkX73GO4wd20Y6cb8JCn3LphPAj9XXLTz7hEyaL0s=,tag:c3kWx5ZHV4g41hNZarZdZQ==,type:str]
+                      #ENC[AES256_GCM,data:wJMXze9AystUhE8SC8VqeQ==,iv:hj3/b3nT9yhMAuc6DTIoCWM++pjHkME/xgYwnyS1J28=,tag:yWgZrDWUAmHcVx+yarKxsg==,type:comment]
+                      value: ENC[AES256_GCM,data:TO8itA==,iv:+tZcT8sLJb/SuKxWGQY6FogVtzvNP0Bj3L9aBrgUHUo=,tag:1Zhu9agweuKk9lYINKFipQ==,type:str]
+                    - name: ENC[AES256_GCM,data:nR4=,iv:URhrq1dsO+2vcuyYqS8Y1cWmtMYuZqBCYTruLmAiVEA=,tag:zajENfAM+HizODX2AlVHRA==,type:str]
+                      value: ENC[AES256_GCM,data:8qPLv84y4720mW1HklpAjQ==,iv:x6OgG0PRUQY7zOerL9BFT3IpoDe84v4AN0pAMFLzlNk=,tag:oIU2NKxGJz/aVXuGASvFeg==,type:str]
+                    - name: ENC[AES256_GCM,data:tNJ3no3RYR4ayFGymp0UO5VXA8bvjuUZJQ==,iv:ah83W97JGk7ckvmc0uho6Oyc7pGQPhHg9rcz70K6J0c=,tag:s7iV8G1h1ROOTtwmCIjAkQ==,type:str]
+                      value: ENC[AES256_GCM,data:XvW7T+SMKJYDUUdpKdpS4Vnyi3LG0mN2Aha/EC/rh5wmKsA=,iv:sQjk/vPK6byMBBbY+LaQuaGhhYzcqOmRRvUzceu+900=,tag:h32cw7ZL4zPdLsz0hqe0BA==,type:str]
+                    - name: ENC[AES256_GCM,data:B+3QGHggeRr09SFFcuW8xg==,iv:PIp10AJh4SwFvM2yHlJfM3rQo8CADywLRUtvUMxrq84=,tag:puhcfyT6K6E0pbOHISxP5A==,type:str]
+                      value: ENC[AES256_GCM,data:2g==,iv:RMZhNsO9wr+/oE2W6P2AeS7kzAtqY0/xU2uRKxHodVI=,tag:s8iuLldFhbAlCXt97CdcmQ==,type:str]
+                    - name: ENC[AES256_GCM,data:8Yt/Y0LsLaFUMOY=,iv:0Iu8PpFDhIRQcBG1l/+le/GxdOOOOURUgBJf3BCQ0ak=,tag:lFtwNDWV/TvzD+RvPt8p7Q==,type:str]
+                      valueFrom:
+                        secretKeyRef:
+                            name: ENC[AES256_GCM,data:6Tfgo0AHrQ+U5NUNpmZ+hQ0=,iv:QrnexpAWTNsmsN5ZprSmTcuyP4+T0eQg7AhdVNKPXDw=,tag:M6dlK6jGEVgR+QhydERouw==,type:str]
+                            key: ENC[AES256_GCM,data:JK3N5ScdeUtc//0=,iv:Folt1IQIcp68oxJZw2wf45q44KZ/0poCKS4pZKBYSCY=,tag:bcsaoBPQDQjYSxrn/KQulA==,type:str]
+                    - name: ENC[AES256_GCM,data:lcMEwPVKHOcTD9sgqg==,iv:g3tRiHb4STMgooWMUr1Vxi8C4KO5DSt3XAIqg4iOSGE=,tag:tt/n6xq5YURV1yqQIeKYIA==,type:str]
+                      valueFrom:
+                        secretKeyRef:
+                            name: ENC[AES256_GCM,data:imMduIGJE4HGW1HZAa0ZTMQ=,iv:nYyw3MmYsYDOHIzu5oGL4emfthRHGib3PcWzbykyXjI=,tag:CQcp+Ft03SA9t9ZTUi0PbA==,type:str]
+                            key: ENC[AES256_GCM,data:DTYkO9ei14KCN8gIVw==,iv:+FPyiBkwZj1/5WwlcdzS2uNUrQKDlj8VYoE/TSR/ceI=,tag:kQYwZYkdL59P2NY37JFspA==,type:str]
+                    - name: ENC[AES256_GCM,data:GadwyCySImWzXl3zig==,iv:/mFbKo61PEP80IN39VaVRG170m1XhB+wuhG0pP/z4rU=,tag:v+RsMg+Y+4U6H8KCfwB8CQ==,type:str]
+                      valueFrom:
+                        secretKeyRef:
+                            name: ENC[AES256_GCM,data:jR8bwI8PZUMAcWFSzfmqaMM=,iv:apSNU2rNT2YIaQtNb5H3EZ9Jt5veGyon3j8u/rUYgio=,tag:H7r6pRHQFRgzhhsWq2eAlQ==,type:str]
+                            key: ENC[AES256_GCM,data:VDAMf1dONUIdjd8pRg==,iv:d0wKlJSznHERipWK5g6zNm0EFgqXEVVbaan17uA1NWY=,tag:SHIPQeGdyxeazXhM+4O1lw==,type:str]
+                    - name: ENC[AES256_GCM,data:KrxZj7RlbsuIfkwNTP6hZto=,iv:J5uZYA38f8d1i3BRiZmDr9YtKbpmkV/X3am90KJ0n+U=,tag:0iNfTLoHEoXtSx233lIpUQ==,type:str]
+                      valueFrom:
+                        secretKeyRef:
+                            name: ENC[AES256_GCM,data:xxVDq6NzjQUSC85QGPa2/JA=,iv:IxwlCBVtuMPv3Bxnx9ykiMDTk1RPrA1Cvvv9gUAGgFw=,tag:xYCMZ7qX6rkgSMF8A5OWPQ==,type:str]
+                            key: ENC[AES256_GCM,data:b+g3qQNHLRpWFKnScfCdfag=,iv:YXiMkJDXsstfOyjKCJpVxuCEpzUZ5x7GucULElMmGe8=,tag:VMIKlwwMiKKfaP61ELIyOA==,type:str]
+                  ports:
+                    - ENC[AES256_GCM,data:ZppbzY7ex56oX5fbKedZCKgx3CPYA604ypKqSEzkYa5bVscFl4fLajLATJD1oYQCBuevedzYn5J9e9ZTC2u3vfo7q47TbwRp6XPbKJ/xAhzt5g==,iv:GVPO30kSHwydQ+/VeyYSESnR8SuqQJwdlDee23YD97c=,tag:GFtMa9RrOgFYw6yEWe4s7A==,type:comment]
+                    - containerPort: ENC[AES256_GCM,data:e2w6,iv:NGKnv4knPU6GZ9LAqd2j2dOi56lvh/JYLUgewqO0rBA=,tag:BJVS/NTClD68Gzs+aMS84g==,type:int]
+                      name: ENC[AES256_GCM,data:vS49yhDK5JZN,iv:DwWgaB4AyaTF85YjU/aKOXHvPS507uVMPwUg5Rh2XQk=,tag:TKv4lZJjFqK/bionvGbyhg==,type:str]
+                      protocol: ENC[AES256_GCM,data:Ge4n,iv:mdkjgjC/HtjmBW0nttVyHiR4r/g309vxFYW8QOJGBxc=,tag:EnKVxs78BT5MRs/5DDy55w==,type:str]
+                  #ENC[AES256_GCM,data:QNap9VYpjIDaEmzpUiSywEsG7VoTbEFH+/g3tihHve7Nr58+Ym/lFtSB6g1ItV3Yyus110Qu3SQlNr6QOmuIzWN77BZ03cRn3p9zMRQi1g==,iv:hvrzykAikCMoIybw9G3529Qgcu7ODyq/rNdhiH1f48k=,tag:+No45eSRhfcBuUKs9Tp9xQ==,type:comment]
+                  volumeMounts:
+                    - mountPath: ENC[AES256_GCM,data:jnhUAD6sLg==,iv:42ND1oS9lsL1pyBcMpR8spy32RKh1mT9n1VUNO+tl1A=,tag:IZpQ5dkVdCCP0vsgsJ3BQg==,type:str]
+                      name: ENC[AES256_GCM,data:T0viYm/T6ynyvtGjKAM=,iv:Pj3kroPH6eEv/OSZrPLBxlw0GTMbbDh+UaVMRTFE8b0=,tag:bS27GhrhQQNX5R/5akawSQ==,type:str]
+                      subPath: ENC[AES256_GCM,data:O20pzW4Y,iv:f34WG6I/bAbGkJXTOXQR76mC2TP0uo+sN9/beCQ43vA=,tag:2yMZPyjgL3MTSMecyc+oWQ==,type:str]
+                    - mountPath: ENC[AES256_GCM,data:wYre970=,iv:fJXnPgKKdmdWp7lVWoeVSkhrD6nffgkB/p+4vHk+zew=,tag:Lv07n6GfFS2WoWOgNoN4rw==,type:str]
+                      name: ENC[AES256_GCM,data:V9B8RgvEmPxr33aOPPA=,iv:D6vB6oh2yqTVL4jykCLQAnvSvN32l6zybiXnx8DcKJE=,tag:QVHGP600aMPzqf4k4IyBdA==,type:str]
+                      subPath: ENC[AES256_GCM,data:ENb2/A==,iv:uv3zloeAqwyMagqOUM3x2l5+/vy/yTt5/KL8C6m7Co0=,tag:K606TD6xrDPs6/t4BR1ljQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDMEtZbm01ZnFsNmRpT3Zj
+            TjZRcDlRRmxnb3pJVVJUWFAyUzQ1c0lFbjNjCnRhT1o1UzJlbElPeEdNNVRCSjlV
+            TzZ4dEg4cW13U1dWdVFjQjJZcjMrTzgKLS0tIFowWEdHUktTSytZRTB2VWNLZVZW
+            ZVNGeHZ2Nmh2cERSb0FBMjFsTHRYKzAKVfy2WSxZbNGqSEhuE5HXhNmvfuku+Hud
+            ExLx5H3OkG5Ff5CAJNEGfrCFiKqGcmMDB+ii7m3TndCFYrAsGoWepQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-06-21T20:34:13Z"
+    mac: ENC[AES256_GCM,data:DlEI54g3tuoj0NIzWB8gBulK9mcyihbSkfAnCeucpXwaNLmVdwe1R9mEWiSzyshGQ6EppYDBsf7AoS1kXem0MVlGtCvsZTwj5IMHjuvJI1hPBK7164Bn0wDrZHvRqfWKQGE10fpKnWYyhSuCVGgetJMevV3CXge5GWcAZIHInD8=,iv:+I/FXIWCA2W7gGeW+DJyvut55Vbun+jVS5pKPZGg7sM=,tag:tQyP2lSKFNcRjaFPVDSrKw==,type:str]
+    pgp: []
+    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
+    version: 3.9.1
+---
+kind: Service
+apiVersion: v1
+metadata:
+    # < name of the service
+    name: nextcloud-web-svc
+    # < namespace where to place service
+    namespace: home-stuff
+spec:
+    selector:
+        #ENC[AES256_GCM,data:QPG70ik1UjsrAtgFBXV5r9Nk8JVidIzcMElV5GrBWl2WZIKzQXzs5uFfnubs2yv72CdJYKAg/to44k/hCZcNfjAc/iLVtRL+LkEeoJnWblQtObxv1TXqwpmeB1q7+msV5h0qYqyebh2MXfvSv+sWsNB/maGRTZ/OlOSD,iv:IC0HmAHPDMHN6pX1jzpXr/OidUPPt77K6gQimZrkEag=,tag:yQov1iGGezSoYnXYn2IB3Q==,type:comment]
+        app: ENC[AES256_GCM,data:WhPCzfnHNRAu,iv:scSGhyUpK4rLfk49sKS5SFvJH822sLTu7b9hk5g4W+s=,tag:A+JBCGJfPwUMKwjhIgHfLA==,type:str]
+    ports:
+        - name: ENC[AES256_GCM,data:CQhB1AAwWb/s,iv:rP3+0dO5LQXpSxnbxKIoHb9C2zjBx7J0s0FbDlfJsz0=,tag:6alVn03LP1rgNmx5xhtvsg==,type:str]
+          protocol: ENC[AES256_GCM,data:eDy5,iv:kBIJSpca5Bv44s0WQA/HY2PFTkngEdtrCjlzDq/I7NI=,tag:mvrNZ/8itwjBEBBtxxbseA==,type:str]
+          port: ENC[AES256_GCM,data:VxHY,iv:JF80e44jQlDMxaFaE462oX3LbAr/luC47cXqKfkrfhc=,tag:gwJM/OgLbuECKMuqxqpSzw==,type:int]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDMEtZbm01ZnFsNmRpT3Zj
+            TjZRcDlRRmxnb3pJVVJUWFAyUzQ1c0lFbjNjCnRhT1o1UzJlbElPeEdNNVRCSjlV
+            TzZ4dEg4cW13U1dWdVFjQjJZcjMrTzgKLS0tIFowWEdHUktTSytZRTB2VWNLZVZW
+            ZVNGeHZ2Nmh2cERSb0FBMjFsTHRYKzAKVfy2WSxZbNGqSEhuE5HXhNmvfuku+Hud
+            ExLx5H3OkG5Ff5CAJNEGfrCFiKqGcmMDB+ii7m3TndCFYrAsGoWepQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-06-21T20:34:13Z"
+    mac: ENC[AES256_GCM,data:DlEI54g3tuoj0NIzWB8gBulK9mcyihbSkfAnCeucpXwaNLmVdwe1R9mEWiSzyshGQ6EppYDBsf7AoS1kXem0MVlGtCvsZTwj5IMHjuvJI1hPBK7164Bn0wDrZHvRqfWKQGE10fpKnWYyhSuCVGgetJMevV3CXge5GWcAZIHInD8=,iv:+I/FXIWCA2W7gGeW+DJyvut55Vbun+jVS5pKPZGg7sM=,tag:tQyP2lSKFNcRjaFPVDSrKw==,type:str]
+    pgp: []
+    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
+    version: 3.9.1
@@ -0,0 +1,57 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+    # Same namespace as the deployment
+    namespace: home-stuff
+    # Name of the ingress (see kubectl get ingress -A)
+    name: nextcloud-ingress
+    annotations:
+        # < use the nginx ingress controller
+        kubernetes.io/ingress.class: nginx
+        # < communicate in https with the backend (service/pod)
+        nginx.ingress.kubernetes.io/backend-protocol: HTTPS
+        # < use letsencrypt-prod application in kubernetes to generate ssl certificate
+        cert-manager.io/cluster-issuer: letsencrypt-prod
+        nginx.ingress.kubernetes.io/proxy-body-size: 10240m
+spec:
+    tls:
+        - hosts:
+            - ENC[AES256_GCM,data:/dFG8WwxtPHMbwgmbAjdz6QDUxX3yYH3hQ==,iv:0rs5+aPJkPFK1PFYm3aJj68DQx5d/0wjA5ZbdKIucGw=,tag:RmkcX/Ln2TTU44ZvcxamiQ==,type:comment]
+            - ENC[AES256_GCM,data:9ur1tPOTZtjJyA8rDTkZfS3fFPFstw==,iv:1oAFvEEdHIQcoC1LP/mVrmi9ud7J9zeuTZra8rt8Jx4=,tag:gTksJhMa4f9r+OmCeP/Reg==,type:str]
+          #ENC[AES256_GCM,data:7NQru2/W17qW4txo8NiGU8i86rw641mb5Vwf3bm5QH2vPYAj/Ba3FWPrAZByxQ4bT7wu+g9z/Xn3,iv:Ma2nVj00yetIplpAgrdsoHGdLhL1vUVI8/pKUdtPaKg=,tag:LNiNr2Yx0AvFHbEOJNg9lQ==,type:comment]
+          secretName: ENC[AES256_GCM,data:+hbb0IEPLkQ0r2oL/goxGpIY,iv:2ydOqHsd8xRlvfxzlC2OYnoNA+lPEKUUY6ccs51uDZk=,tag:4g9RSA43Oi8zl1SOaPMYuw==,type:str]
+    rules:
+        - ENC[AES256_GCM,data:efUfaSUngi4z2K/IDv+MxcBTW6IueWssww==,iv:IAdKCFbEdsIrSf/03wJXIMe9lclE3wgYgbJO6DK9jTM=,tag:mxl9/dE9QoPU2is6iBkD0A==,type:comment]
+        - host: ENC[AES256_GCM,data:C13jvczDNwUVvTD0mz2tiWBcwJl/Bg==,iv:vvKm68CRf7NAI5G+abEuyEoTXtWjAFqgyOb3J7nwYwo=,tag:WDPbDl6KQSl6yymFTFSiVw==,type:str]
+          http:
+            paths:
+                - ENC[AES256_GCM,data:66/MyFSOZeb2wvgT1Qtp+Y9diPEocdSBCtODaT2bd0cnX+XrW+Ks68gIgFGdTcMMcwhOnA5dWkd3IRBqCA176rQWmR9E,iv:FYc5XJbrlZh7GBPUSTBTn4OgyDX1qdwS7Mh0TCqwF94=,tag:9esDUxKATtCcRF46B4/aUA==,type:comment]
+                - path: ENC[AES256_GCM,data:+Q==,iv:vxGktWEEmcNtQLgBeiNqVzRWBcxnC7EWjIbssIswgPQ=,tag:0tVGmN7CkyzFqPoC7jE1PQ==,type:str]
+                  pathType: ENC[AES256_GCM,data:AqqqcfIC,iv:LYatMLWtThLoK3BKmWnZZ13ARs+84Cb6aIwzqL2qG9c=,tag:RdYydD67x4qkwDZnl9PvfA==,type:str]
+                  backend:
+                    service:
+                        #ENC[AES256_GCM,data:dlVvKDDC89AId/ajPA8RBG8OLvaynk03gJHPCqKPJkWc0plACfGR2dSMzjFoC7rUabuxTOdsUQKtg1ovEE+L,iv:i54WFoMlHnWDtLMl2hWRoEoWPrSRQ7kuOT1G8DzfC68=,tag:MJQb3aEZCctIhOAcwYaEBg==,type:comment]
+                        name: ENC[AES256_GCM,data:0ZePaMLcEPOGKzkVMV4wXdc=,iv:n7gX7CdDzDKPP6sUFfvN5sPr41dYZ1fgzRJS5pxxwCE=,tag:wtp9qDCwOBjfvJT0goqEJA==,type:str]
+                        port:
+                            #ENC[AES256_GCM,data:ku03bhGiaeOwsh1xl+ZIT8K9+ZOL1u0JDxxa4/odpasFWT2owkYNZc6m/2N9hvpsSDazsNEAavlJrk0s,iv:66IRE5URYo/rMx0mip+pV3tYoxekojsF02KnHMGF/cU=,tag:oukc+qjqyYr1/JeK1aNAhQ==,type:comment]
+                            number: ENC[AES256_GCM,data:u7TK,iv:ClNZdIRVlpQ4iLqraHGxvNb/C/DA6hqxVmBVv17E1/s=,tag:/GDdlQvDbRfVl9XtkFKwhg==,type:int]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLc3NtNzJLVzdIdnBxSURZ
+            M0x0Wk9EYzhGOStXSC9sNGxYRVFreng2SUJnCkZpc2NkQm9ZZUF1TEUwTTBtTHFB
+            N2NrcFl0K0l0MUVrYlgxWnhPTXp5SjAKLS0tIEluT0p3dUFKb2svZXVYRnpta0Js
+            cHg3LzhhYXp4ZGp2YkdJb3lxckxiQkkKKEOxwSzJ+RIvZpKDY8fR6b4KaAfwMqon
+            X1bl80wzIzqOk04WnhvGKvBzEvfJ/PqesLGE1mbXHNw11Gwi1FHE4Q==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-06-21T20:34:13Z"
+    mac: ENC[AES256_GCM,data:lUEkdmkDcflW3b1sNQOwJehXaaieewilxu2Ol8PbxnaddqD8DlwIC45LO0SbmUdGRtHGGf48+12UurSTfwdLzHAQMNEzpgfuOr5eR9pwZw7YaNm914LMWKtvXfM9Ea9Ki0z4ER9f7wJ4h6Adt9zWuwN9eLEvn3mLxx1vdDMSHPc=,iv:xUuD9zjlNvjBwWW5BhYbcy/RlT2vpcSTBfPMP5s0+yU=,tag:KutAUWSE4Z4wwLnLqyMRDA==,type:str]
+    pgp: []
+    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
+    version: 3.9.1
@@ -0,0 +1,32 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+    namespace: home-stuff
+    name: nextcloud-data-pvc
+spec:
+    storageClassName: ENC[AES256_GCM,data:mPFfxt3U3MpBtw==,iv:aY4uIPRpfuplrVM0Z6Qfnmu5tUpgRCXuj4HTAM2ehQU=,tag:L9z147xf4NEKb1QkL1Uw6g==,type:str]
+    accessModes:
+        - ENC[AES256_GCM,data:3howc9TchR29H/Ealw==,iv:o/uG2rHG3/8nxu9GfhtJ0r01otSc5mBCfKzwoETPIlY=,tag:OpleY762I4P0fp1/IFQsHw==,type:str]
+    resources:
+        requests:
+            storage: ENC[AES256_GCM,data:bdK5K+s=,iv:tkR6FN/5wFR3Je1kUuxoVJdIlBGYil0mFus2xQAKxJ8=,tag:sOojBZGPYStuM2ZeoYdJOw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvTE53dFBGQWxvUWNENjIz
+            U01NMWVqakczS3krVkVDMUpLWUZ6dGNtTzBRCmtQVkQxR1JlOTVTMXBzYnI4OE14
+            R2V2aTFlOVhydVV6bjBOaDJ5YzcwYVUKLS0tIEpXVDB4dnoxRkhIM0JvVitBcytj
+            M3dwRXBrSXJhZFFXUXRXc0dMdlNBa1kKdYaFoykTAY6v3MxSgZHjqoquLw7lIdz1
+            XQoq2k+eJQU4evS4vm3b/RD9u/dCrnVB5/nCr1AexsVBPG0hgBqJPA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-06-21T20:34:13Z"
+    mac: ENC[AES256_GCM,data:Fo4SKx6WgKbh/QOW8sYsQeCsLKlnWEFADeCHhtx2kMc0s0QYmebXit9vh9gyuoI4eqjKjQ7x/CtKcCQpmJMRaOuTIosZqoxSIOMB6SfhIJv5khhm5PHEqQzWl1xQf3sO1PW2Oe/NrpKPJyPZSqjh8Qxis8z7Lp87qSPCnmYIWow=,iv:RXHHLtK8gORmQETEPb+IAObPSbg16qB4w2yissMw2UA=,tag:akxWDptwpQgxJShG6X9L4Q==,type:str]
+    pgp: []
+    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
+    version: 3.9.1
@@ -0,0 +1,38 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+    creationTimestamp: null
+    name: nextcloud-secrets
+    namespace: home-stuff
+spec:
+    encryptedData:
+        POSTGRES_DB: ENC[AES256_GCM,data:ni6NQNKMxoVtd+QvpyFtJvjmFCFqIPiHTIjd1ENQ6rtSniQ0J2ambGhtxJNPOX1uNdeq5Gj+ilTFuXBmLoVVjSCaH9VgaL6zzPM04Es/0RTzLTAfPlIbTNakX9VmLTxVVTH/peHwZCfvmj1XvSDxBna8nnIGeyzwo5Pp8QR6844Kr06lCum9VcNN4/7vCGn205NyYiIenvaBNoiJ3L2JdT0arztM9U4b8fEAVf5OR4ugm8upvmMf2dcjnrkz6iDCb1uF5cEo20Aj48GR5iEay7dlqZPik7INvJnACQxdviKU536yjnJbGBdXhEANU9jy9YDKSisIfypRqFdMu7mP6CwE/Gb8+hTvgVPFR2MDglh8BN5uxT1T6CoQq1g6bK3tQ+FQSezIvc/vg3bmw+Vy/QjJ5wR3SxvD27Jm1OIFzwd94Axc6WLz331EmJYrKwNwZ/wP/MlIxxo+eCiG2DYZ0u6pWvms5GUKqRuMX0EEDomrLenUkHi8RRS76rRtcLY3AXnQkeCnpcKmJgEKyPajyrD1z0zbcfuISGmzc0hroioxjyACJujjL3FNx3Rel2hLbfmygTWg0mazIzCYK8gF553DPd7hnK4gmDk7HKEQRJTJ9t/O7frEzgQkZASoVDynn1ZpztlvuwmzoMQpCd0PuE9+M92be9PxecwEkB6oYGksXHUGgZORaCtXEIpmgwr7MIn+8TaSOzv4XL59n51grCoemfy0BeIr4UK04ISe2bmB9Eu//ymZurJZIW7ijyhgKaAjlRzwq0SIqpd1850h2URcaGQCNW0PSDc0yratR2DCWTJak7HCi0ZSju4n2kWCraYHKMdHeBX81xVxd4wOtQjUIofzpLPTZuyLVGH5wE663LmtZFCoeW648zIlL34HPOo6opfahHrERHlR6g5e+nKOMrwKG0gDelTWmGflaQUeZgf2qNq9pgVOegZRs0VQ,iv:AURUI0EzefWWBB8xLTWVuTpgQR+qvvrnkUBRPUqR8hA=,tag:6tdXWZpHrbUS8GpONs++YQ==,type:str]
+        POSTGRES_HOST: ENC[AES256_GCM,data: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,iv:u9nW+FYFuOS9GiIEjIItQGowOEumOmtErFOlYp12/ws=,tag:XGt7LdbsE0XB8RoLPCrykg==,type:str]
+        POSTGRES_PASSWORD: ENC[AES256_GCM,data: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,iv:XPlYlMeMVOKCHUAksezsG7qP5niJET34c35Y2ZmvXBg=,tag:GTCRiOcGLqY9TDUnPNzl8w==,type:str]
+        POSTGRES_USER: ENC[AES256_GCM,data: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,iv:uXOUTl6FQWGTePrL9Mm5zD/Xjst7Rr1O6ydktFZpKi4=,tag:PS5fYGtv5S94FuzXXnPCVA==,type:str]
+    template:
+        metadata:
+            creationTimestamp: null
+            name: nextcloud-secrets
+            namespace: home-stuff
+        type: Opaque
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0cXV1c2F1NnlkRDZlMXd1
+            ZDVmM2Ivc1ZpVzhQcDdjSFdTYzY3SmFTU1MwCkM0WXpBVUx6MTJxemcremJQRGRN
+            YzhTeHpxTnptT3AwaHJpYWdsNExVaGcKLS0tIEdCMUtraEFFU1pFMEZjTVIwQUlw
+            ZzlnRStCUFBpWUhqR21TY2hhbTl0amMK+nDLedE0qoJKc7ZzmPFBPuXGSO+ZhxXr
+            6F8rL373g5FXdhON+onALka8uueRPdyp7XgYaGJ5j5PF9wxOn1o6Yg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-06-21T20:34:13Z"
+    mac: ENC[AES256_GCM,data:abkD0HJKMvsx9YoowxrfyPDWOqx6magXBlBUdvba5SCbgzvKdnIb7lahb+OJhHBZONN+oglrVp+LxUJpNDKeUPVUoDJmceKURNiqqokqkwqfXtG4NLWFOTEYtTMzkH7tYgMBsSp+E5uMPtuAMaKKvAxsRukQi3f+Qvc8IS+T5KM=,iv:V+KkdStTShV1SNL+0im/klauVZ/tu0HzOwMnIfwaSJo=,tag:7VIVMRJifbDecdiSoqQ27g==,type:str]
+    pgp: []
+    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
+    version: 3.9.1
@@ -0,0 +1,36 @@
+apiVersion: v1
+kind: Service
+metadata:
+    name: nextcloud-local-access-svc
+    namespace: home-stuff
+    annotations:
+        metallb.universe.tf/allow-shared-ip: internal
+spec:
+    selector:
+        app: ENC[AES256_GCM,data:xpD4DzTEDV6I,iv:19OFLUAA1kwaqH81QDhSVExgJ1BVz7GzaM3HjuqaKc0=,tag:xIW9d28ff+a6x95CoX18Bg==,type:str]
+    ports:
+        - port: ENC[AES256_GCM,data:fFUysMk=,iv:tXf1niuQdFwa3vCv2XhKD9NRXD1Y/L2DtyFpjzMDxcM=,tag:HkcaVx1Mh/odRriSrCCB+g==,type:int]
+          protocol: ENC[AES256_GCM,data:Ldvh,iv:Tn1XpFtIx1j5KLLv6/O8Mxc3B/zKY/XCkEYeYkfYAAM=,tag:t5TZHzb7zkt+AccME5ZjRQ==,type:str]
+          targetPort: ENC[AES256_GCM,data:SpU8,iv:eorCcZiFd2XW5mrAAxV9pUd9/te8OOJw4ytFsib6QFU=,tag:CHYxBn6jO1A7digeIrMW7w==,type:int]
+    type: LoadBalancer
+    loadBalancerIP: ENC[AES256_GCM,data:m4nae6L+DcKcbCn/,iv:F8aLBIZTg/XaSRA7XtrzD2D4c3LLjzOqbOXcGW0OcdA=,tag:zknXLMTJrvlPMh8g8hjw+Q==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuV2trejRRUVRzSEZPamFs
+            Q0x0aHdNRkIyakkrTVdtUkp0b29EM2FlVUZZCnZiSHRIbUwxd2M0ZjBLYzBRd0tj
+            S2JNUkVJd0s5YVIvc3Mwdlh2cThtZU0KLS0tIDA0bWoxNzFPT1EwSnhEU1IvaWho
+            WUkxYkRxVHBObUo2NVkxTFplRFVJeEUKPHyq8TzCIVT0QKgZo0FGaZZxSyZffNsJ
+            UN9xW3zlEkVDl4Ay74do4vGKp0o+1F7FRTg5HowxJWHw21xrqCGCOw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-06-21T20:34:13Z"
+    mac: ENC[AES256_GCM,data:w9MvL/mwzbhDc2METWUNJBNcTeRJhtov7vU+NrWvGmzp3/qf2qzmxMOKH1rWqAjZVUPp72kA19DqcQpYaF8ThzmnUUeU5YoC/v4gGs0yMCGoHojr0q+9UadSYhhw33jQIrb3MmumRUDwBSFNfOrCN0yHTgFhtXlysDQ/uaGK4wM=,iv:R90kP+uo1xi+tpo0sAkdGVv3vS3UnvfgaUavHudg+uY=,tag:ZPq9FxHmrfO1LbiU/G80AQ==,type:str]
+    pgp: []
+    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
+    version: 3.9.1
@@ -0,0 +1,37 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+    creationTimestamp: null
+    name: nextcloud-db-secret
+    namespace: nextcloud
+spec:
+    encryptedData:
+        MYSQL_PASSWORD: ENC[AES256_GCM,data:h3Kqmkf7U7uvhsi/F6spX9+WZYgwpaK1ER+xObTN8JVuB1cbOiwxkGaLdoUbheWQ4QOctTDPX2B9mAdZayxni3BT/OSJdYgF5AA3T75FcjkGsJw804avpalGjIuCvbDNqAff6RkNoAxZqV8b/hVZyvE7HMKYDXOIbtOvxf1ur59ltZv7DfOoywVBspnVQy65gyhFBcxpmpUQ+7SreDr2bEl1ilo4lLdYUXEX21jKDrtzf8A+/4UT5ah0QIJpGIMCQKpBR7fNF77CAYDVz2/U6Y3QGvqs/KJLjxIPm+QBrC08fbhPbd8x7DCB849WTtLRqi7NDCL7Sm4p3x78ODQhz3+89zlWS4a+WS1vAYV0V5uEYUZj0Cq3Q8/KBs6X0+8l8rKmZwRM8n5PNpzH4YTG0p1+NHXYgk7MpUD6n9g5ZgaDRlSAOOkU+eF2B7dSoci7/rFDODPm+UvZQMvCy8Pxs1GqwPaE0Hay4dJeqFsKRKC23ZC0+XAVw8wZOeu0E0N2MuskqoHFm8YxUlb8L8ezB8VbKarnfRZaummb/tOlpMhyXeRSG4GmqA5UrUyEEAZE42W0q0KH95r8M53baGpzh9XWHz5ZPPrbzoGc6dHTfxPN45iZWgtTqx5wb/cttQWzd6lH2NoZZ0qJ9HV7dvbF7H0amNG+qFOFTy0N/9kQ41cnnO8ycsH4+dIAW/v0bbYOTXLRS8D63LrhPDoD24+U5YxSK6BoUXrBz5oP53aMoDO8BpnNxhWUlocId+0TYV/CgkN+pq+AfynDKSvvL2etzJMsmVFBEAGqBebzJIooxngZLbiaxFPVyLMx7ksK3HhrpuCe29M9wdJcnRhOV6r7vV8xDZFn0YVJ+hm0h04pLPCciEsGb4lUH+4/9gtDN7GQvokGDs857U8qw5GhwJFU88df6JIQKBGrY09LtnITTb1pNtf0sW65qBCjMglqln9N,iv:xSIT+dVL+5rF4G7BAeoD64knbQTi3YpKPZqwVxCJLso=,tag:WTcgH1ysprFFuKGg1rGutg==,type:str]
+        MYSQL_ROOT_PASSWORD: ENC[AES256_GCM,data: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,iv:BcpSJ4WDs933JWH6UhaDNejoLDmeXB3VzRD6KztsEs4=,tag:koDKdTr/CWmi55x7drxmtQ==,type:str]
+        MYSQL_USER: ENC[AES256_GCM,data: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,iv:I7Seo+Y0q9ahSD37rqjOFdTY1XsxM0SdQnnIvMlaMCA=,tag:lommKHqEU9RJtipmZmnLdw==,type:str]
+    template:
+        metadata:
+            creationTimestamp: null
+            name: nextcloud-db-secret
+            namespace: nextcloud
+        type: Opaque
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPQUprS2V5MnlHanozV1I5
+            Q25NWWM5QlVQd3owQW5SYTJSYXNTeGpYbUI4CmQrRkFKcDY0SGtoR3BURlhnMDJI
+            cWdnSUJONWFzMnJFTDk4amI0YkJnc3MKLS0tIHgyQm10TEJoYWY5dE15YXdmSDBV
+            UmNMUlp6dmlneXkzdGFBemdKZ0NDUkEKBoVhcmvt6z/ZGOoKUwEk7aF1R0LSiIGy
+            tKctCJd81nsfnrmzq5nMzjp3bbcmwrfVwUJDnRwUyc2UBHMkR7e1mA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-06-21T20:34:13Z"
+    mac: ENC[AES256_GCM,data:I+UsTbFeaTGkcymA/U99d5p3b25JTroStUnLx4hC5I/vvhR1ILwCx8j5gxSh87C1rdas7BqyOkGVtE5xnyMWUC/VZ46Ep3RzRKURKIjypVCcJ4HfRRmR1SoGx5nytI1K0m84K2BiQTTwVqq1Eqkkuk36RXs6ckxnkP1Lv9Y4Gns=,iv:xLNLsvWmqzmMenUUo9wDufCOT8sPvo0i7n6VAhuUvwY=,tag:SA4tY+wZ8aGh3aHfB5RyIw==,type:str]
+    pgp: []
+    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
+    version: 3.9.1
@@ -0,0 +1,112 @@
+apiVersion: apps/v1
+#ENC[AES256_GCM,data:0BSOOGC1HVZzKet3KlpEmWNYmvSHJP3b8ULf9C4hpssmtwFiJPkXN2uGzxxt8j+aBLUs,iv:6lwrFMoJ2DJL0IG9/dp90hSv6ZKvUH5Lo4YrEcQ/V2w=,tag:x0pZDVef7x0SCuWPxwP5GA==,type:comment]
+kind: StatefulSet
+metadata:
+    # < name of the deployment
+    name: nextcloud-db
+    # < namespace where to place the statefulset and pods
+    namespace: nextcloud
+    labels:
+        # < label for tagging and reference
+        app: nextcloud
+spec:
+    #ENC[AES256_GCM,data:rfvWaG48rJ57LLpg0IN7Y/NL9PmXJXuh5Fbdu4TrNe1eKNaFIP+65nC1uyjKkfO3,iv:17M6oLHL6Ps77UmGoW+hgbTQcvJPdsK7f/j4sVW8sfs=,tag:ZNH7eTVbPTnktW8/b3ecDw==,type:comment]
+    serviceName: ENC[AES256_GCM,data:hrG3YN6enblzVUWi2JwUVBVyqgI=,iv:+AOn2f2XB2y+U2zaC7FXSdrByiTmmLy+n2wv/pk5nvo=,tag:KOmEvvAJtIaahKA8hBLeGw==,type:str]
+    #ENC[AES256_GCM,data:hRk6FvOd+k5LTs3LUkeipqQMnpg1h1lhu+Xd,iv:Q4p2U6C+25DEqznBDMsjtMUkDVa+9JVlNUoK1O/fqLc=,tag:NjSGRRKeCEUuog1pMXEPGA==,type:comment]
+    replicas: ENC[AES256_GCM,data:EA==,iv:By6SI7SCsq8EyL5Wp2U5K4H8NBHzB+zpWqhe3GpWmTg=,tag:V6UMCZZ3ekduGNXz/1j+7Q==,type:int]
+    selector:
+        matchLabels:
+            #ENC[AES256_GCM,data:2wuTp4UhYvJueDx3zo1qT5Vg5EK5XitTa5L5aYNlapkvsc5EPpM=,iv:XUAt1AJEAek+GsO6ImTFtxoDo+jBfCYfVba41bNFixY=,tag:od9NCI/nDIbbmz+UiI0nvA==,type:comment]
+            pod-label: ENC[AES256_GCM,data:RwCawrdztvq5kpgAkX7MBg==,iv:d2Q5AmoYwhAHnXeDvozHHxObgConqTXkEgLuHy+32Hs=,tag:Yt/xRGhIkJ9Clox2YWUSCg==,type:str]
+    template:
+        metadata:
+            labels:
+                pod-label: nextcloud-db-pod
+        spec:
+            terminationGracePeriodSeconds: ENC[AES256_GCM,data:WLm7pQ==,iv:ZQufs4RsAg+lxhzhxQm+qEjiLtaMsdYHQRuIcXFVzIE=,tag:3XFcp9ELu+/TLuwxK9nfCQ==,type:int]
+            volumes:
+                - name: ENC[AES256_GCM,data:xuHVKfZp7nX4wIb4IYhN4Q6Lyr8=,iv:muRGY9ZhHnUKhXLcqng2AeHAEE2UbCHyQWUpLMsLn4k=,tag:JODjFThTzbKnYI+wbnJZaQ==,type:str]
+                  #ENC[AES256_GCM,data:Jq9Inc4dP94AyFNVC1RuHB5iIeay4Y8O04KGz/bRs7J5hkWuJg==,iv:+BBiiugQ0l+00UFlXH+3yIN0SA6JJpZWA+8aVPA9w4Q=,tag:WPvyKHg888sKBLUMU2PYUw==,type:comment]
+                  persistentVolumeClaim:
+                    #ENC[AES256_GCM,data:LJT8LpRFT3kBwGGVdMmcjVn0RNlVkCKJ22A0oUhfCLtZRvMfxo05fyD/jDM=,iv:YCkW2hxlSVNR+3C8BmCtDmGpk2geEx+baolZh28HYrI=,tag:IbjLzT7nB3+q+GUZcpMvHw==,type:comment]
+                    claimName: ENC[AES256_GCM,data:1hLomlK4TLAy4VKxfRAwxg==,iv:WdfCyYMrTLFZW2kp1rEs+NXWuw0T5wcpbTJssky8GK8=,tag:/n5T6k7ZwMcEgyMVqynSpA==,type:str]
+            containers:
+                - name: ENC[AES256_GCM,data:qjhr5NxYjQ==,iv:iDoL2QrVENKXpMr6L1P2s4jpjR90ZhVnR32GOFD49NQ=,tag:sg+blsZrjDHCWhpTmrS+mQ==,type:str]
+                  image: ENC[AES256_GCM,data:tnVCzPPyeUK8eFRmd7WxCxC9DQ==,iv:hHcXwoLXkh0dffGgpNCvNAzvWa8zNqvoqWYcz1dR6xs=,tag:vu/IJc+YW86bArFkMNX9dA==,type:str]
+                  imagePullPolicy: ENC[AES256_GCM,data:6e4Gqq2E,iv:Dtux5tqYXWtXUpBKIUnEasl3cpI5saDC1aeKG6RYOus=,tag:XuyzfTUu4QuDLyCC1zbDqA==,type:str]
+                  #ENC[AES256_GCM,data:6VtUaeifJ7+I8IqT57uNpDlj2vMH2pZCYgLFIpxqrwVnMwNnUOSXiw7h6KzevzGTNWclehvRf9XXVnZ20OsJlvznCX3A0GLckk4=,iv:RPaOQvaHdV3fgQy64NGbhn3mN4eVMufCglxaT90EOgI=,tag:IGqZDqmvVWcu9gXGL0corw==,type:comment]
+                  env:
+                    - name: ENC[AES256_GCM,data:Yc/Kzg==,iv:65x0vKv2P0OFl6k/EkR5csUzcnRt14y6iGKR40tX6J0=,tag:GJoYtYUho/gX6TsV6VdLvA==,type:str]
+                      value: ENC[AES256_GCM,data:WsLcww==,iv:a5DXXJf9sUQTS9Fp3XCZrn9vTV62UKDSboFVIof4Swc=,tag:ID8HfkZajuWwYEG6YqP0EQ==,type:str]
+                    - name: ENC[AES256_GCM,data:NvnlXw==,iv:QIsRPSb19hIhKiIyaCXX9F/FiYCbxpXBm4iGIWwtysc=,tag:iDGOazaJIhXtqaCrSZ6y9Q==,type:str]
+                      value: ENC[AES256_GCM,data:mlcjPQ==,iv:E6txgqKzarDwzPUfnitzSdOs6NJQjT1tU33WzyYVapk=,tag:mrbQWvxiUbtg+3IEtcVGsg==,type:str]
+                    - name: ENC[AES256_GCM,data:h9o=,iv:e+BYan0sSOzvSgMJfCrEac21I5DLd/tOCiUsUTeemK0=,tag:sO76DhtVbj607heEW+dPnQ==,type:str]
+                      value: ENC[AES256_GCM,data:P9AHQb7PxYrMyMghwl+npQ==,iv:0dtsZfbBoqVXy3IGJ8aFXR4xVMaMYLNRZmhwuwSoeHE=,tag:ir8fZ0t0KEfNYNHtTRF2qw==,type:str]
+                    - name: ENC[AES256_GCM,data:mStxZUkTzfi4z9N2yPc=,iv:2bkr0F+wHfz8AZfsJMavHzFKNCOBjQ+hbj/dX5iBg0U=,tag:FOcutSX7X/P6HgLuxkmqAg==,type:str]
+                      value: ENC[AES256_GCM,data:nxwuSQmY+Eco,iv:IwNW458tro+yshNYbsRyOK/zntv+KIg9jqSabJRjbEk=,tag:KuJ4tag/qKIFbIem74MOCQ==,type:str]
+                  envFrom:
+                    - secretRef:
+                        #ENC[AES256_GCM,data:AJO5eB+dJS5cHhUmBmBhS5c8aA7Lqfh4cvR5oSuy+T1GARFjLv3x,iv:4BZS44DPz3se+P6Kcz5UraiBNROQEq4NbtZvAkAjrzc=,tag:+5taMHiQKDIU9bMMgUsyxw==,type:comment]
+                        name: ENC[AES256_GCM,data:ThOfZ6F/xNGG1+WajF6vCOkOcw==,iv:Se/XqFmYiJgYOoQ2CkRCHa5lIt+364Q/GKUCIPsSpIw=,tag:tm7+BF16RQBWaOVknN/mOA==,type:str]
+                  volumeMounts:
+                    - ENC[AES256_GCM,data:PJC8US11tObZMk6oruZsJr7LNimqz9E2vsWKxbZEPnBero2Tnjde9RZZ879p2VBS+k6yymM5aeEm9tTUC/h+4vM+2cmtSAfGLsnsjykz3Q==,iv:erftQ8bfEpYwdklAjQTl3XmmuEG53R45vyuiNhi4xWM=,tag:Oa3tPnaDI3Fu8lGSjSdJaQ==,type:comment]
+                    - name: ENC[AES256_GCM,data:RDXtZpzwHHpvPZEEBQ7UWNvnSfA=,iv:HnE03auXrPWz8puWwArhY2wOpW6TW8fUSEV/PvzuGgo=,tag:NjBXjxw1lYB6LZ59jG3qpA==,type:str]
+                      #ENC[AES256_GCM,data:znkPqMTDoL35xxLuqooWp+2GKHrUNA4hga6kOoHKdp+bIQ==,iv:/8iOfpJ34t09F+Nkwg2Ig1oa0Gi8F2SgGCo/u7LEGbY=,tag:RPfqF4p9EZLfRba/q8d6RQ==,type:comment]
+                      mountPath: ENC[AES256_GCM,data:cPlME36giQ==,iv:dqV0hFdFF+mKaO5XAoEae5iQMC4MLK6C5tvZMoVORy0=,tag:D7wOUr/ziq4sw3xZATSqxw==,type:str]
+                      #ENC[AES256_GCM,data:u3FIkw1lujVWMyoHvvbP2zZQClPQMieSt36lOM6yCLkdjasrCGmylxH1ELahaj07dQ==,iv:UUNxmnet/GHVUcGWnXkXrL7EQ2pHrqRph2+j+fOXDKY=,tag:/PpAts+FlY5qYH2c5vwmuw==,type:comment]
+                      subPath: ENC[AES256_GCM,data:mdaHe485/bOGICn5AvY=,iv:slFrpf0D3Z/ubGp9YmwHD9dtBZQaVZmntn9PQv4751w=,tag:DwmWYyvOyISYv7Sdg0uHoQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBseWlNcmVsRXhSd2gvNG1B
+            eElndnJPbVd4TW5IMTQrTFMza1dDMTd6QkRjClZnSUFCQWVMTkMvWVdsaEZacEIx
+            a1lINVZjZmIycGVFeWpLQzUwMkswSkEKLS0tIE1zU3IvQjNuL09GZ0VMNUdaMVJi
+            WGhmVW9zUVY5R29FUjZ1NWVMYVlNQUEK8EzjXyY1W74feONuRgKiVmRE6HEpKo2k
+            O+2fwEOUFt9uivB5FIy2Dl36g9jN25tVvmwiY+Ctsd3qvLlyy6a08g==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-06-21T20:34:13Z"
+    mac: ENC[AES256_GCM,data:eHrYt0NnlVPjDJDEfYwA8k05hKtdJ6Ijg8DTTNYTnXRGvsCDj8TFp3ygUeXU/PAUpKhBUNj+31h5nmqZDOUO25xJaQQtl2naE0mFhpFr9EGYMw6sZLB0PAjBlx7uUFaMBAdbhAVCozgFKTqMCV5ffEnik+NzhBiK6+xSflR7p1M=,iv:Uasc1Fcidv/OemGnNMHgXZ1VWRTB6YLGoABL3IZaawQ=,tag:pGGRPVH0f902O/3pl569hw==,type:str]
+    pgp: []
+    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
+    version: 3.9.1
+---
+kind: Service
+apiVersion: v1
+metadata:
+    # < service name (see link with statufulset yaml)
+    name: nextcloud-db-service
+    namespace: nextcloud
+spec:
+    selector:
+        #ENC[AES256_GCM,data:hT7j5uWB7xnHYAR+h7buSMCf5VYEZLKUrNpIt3jDG0i89fVd4GhEz/bKwsOgxrJ2S3lMZ5qpuZHYYSDWuN2EtrvIKKeZFn9yh00z,iv:hOpRWbmsjnyY3QnkiEHPlK74yzTrIWyTzEH9LL3HqZ4=,tag:dxjPpXYGVcyfI4D8sEAi/Q==,type:comment]
+        pod-label: ENC[AES256_GCM,data:KuOE03pauzQqyqi4NM8lKw==,iv:LBDAZe4lv5iMYbJzDWI8e9whrDunsliqXGqrdJ0ZJic=,tag:MfsCYlsMZzFctB+n8FS6AA==,type:str]
+    ports:
+        - name: ENC[AES256_GCM,data:Q/Kgw5c=,iv:4d8XMUfbadksl724vY/jXecZ9nE6ZVKDck2tQgDDlMM=,tag:/CoHD/bBNS0pwVbbeSdmZw==,type:str]
+          protocol: ENC[AES256_GCM,data:uIvn,iv:vVLMl/OH4+5h9eRnhmvjcnSy8IFx5wLPq/OgRqOXwx8=,tag:1d7bkKixPjS09KI5+UcUcQ==,type:str]
+          port: ENC[AES256_GCM,data:tn1ybg==,iv:ZOBI79NCtpojTG7B+iv+GTGJl2Vmqk+3I9acjyeRpLY=,tag:bV3nHGlHgyvI2ib3ve1u/w==,type:int]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBseWlNcmVsRXhSd2gvNG1B
+            eElndnJPbVd4TW5IMTQrTFMza1dDMTd6QkRjClZnSUFCQWVMTkMvWVdsaEZacEIx
+            a1lINVZjZmIycGVFeWpLQzUwMkswSkEKLS0tIE1zU3IvQjNuL09GZ0VMNUdaMVJi
+            WGhmVW9zUVY5R29FUjZ1NWVMYVlNQUEK8EzjXyY1W74feONuRgKiVmRE6HEpKo2k
+            O+2fwEOUFt9uivB5FIy2Dl36g9jN25tVvmwiY+Ctsd3qvLlyy6a08g==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-06-21T20:34:13Z"
+    mac: ENC[AES256_GCM,data:eHrYt0NnlVPjDJDEfYwA8k05hKtdJ6Ijg8DTTNYTnXRGvsCDj8TFp3ygUeXU/PAUpKhBUNj+31h5nmqZDOUO25xJaQQtl2naE0mFhpFr9EGYMw6sZLB0PAjBlx7uUFaMBAdbhAVCozgFKTqMCV5ffEnik+NzhBiK6+xSflR7p1M=,iv:Uasc1Fcidv/OemGnNMHgXZ1VWRTB6YLGoABL3IZaawQ=,tag:pGGRPVH0f902O/3pl569hw==,type:str]
+    pgp: []
+    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
+    version: 3.9.1